Author Topic: Microsoft Spyware Beta...Is It Really This Good (Read 1950 times)

.:F3ar0n:. · « **on:** November 10, 2005, 08:54:08 AM »

Ok,

I've been runng some tests involving microsoft spyware beta just to find out if it's really as good as they advertise. First of all, Spyware Beta is suppose to offer a "realtime" spyware protection (aka: if you get spyware, it'll detect it automatically)

So I decided to run a little test on my system (please note I'm taking a huge risk by doing this. Reason being is that I just got done reinstalling windows from scratch last night. Figure I'll put it to the test now so if something goes wrong, I won't have to do all the reinstalling of my games and such from scratch)

I downloaded 2 programs which I new 100% contained spyware (weather.exe, and search 100) To my surprise, beta picked up as soon as I ran opend the zip. I think I'll try to do more after the lan (wanna install my games and patches and such before the event)

In anycase, I'll keep you posted of my study. Just to let you guys know, what I've seen from spyware beta, I really like. The Gui is pretty nice and they updates daily for ya. Worth giving it a shot (I was reluctant to download it at first because anything with "microsoft" has the potiental to be horrible, but it's holding up) I saw reviewers give it 5/5 so it's pretty nice. You guys know of any tough spyware that I can put it to the test and see how it does? Let me know. Thanks

F3ar0n

David

Pride · « **Reply #1 on:** November 10, 2005, 12:25:18 PM »

I have heard that it is definitely a good program! I am still awaiting the server aspect... so I can roll this out to networked clients!

.:F3ar0n:. · « **Reply #2 on:** November 10, 2005, 12:46:04 PM »

I read some other reviews and according to microsoft reps, it's gonna remain free even past beta (thats awsome) what else I didn't know about is that it tells you if anyone is piggybacking off your bandwith through a wireless router. The main downfall is that it offers a browser restore, but it's only for IE (figures of course). If they can get browser restore options with Opera and Firefox, it will truely take off. Other than that, it's pretty solid. Are U running it Pride?

By the way, did you get a chance to read my little ongoing bit about windows xp. Would appriciate any ideas of what might of happened for next time (couldn't pin point it down)

http://www.fites.net/modules.php?name=Forums&file=viewtopic&t=1605

F3ar0n

David

Pride · « **Reply #3 on:** November 10, 2005, 01:04:10 PM »

I am pretty sure it will be a pay for service.

.:F3ar0n:. · « **Reply #4 on:** November 10, 2005, 01:45:25 PM »

That's what I read, but I don't know whether PC Magizine is relable or not (I buy maximum)

David

Pride · « **Reply #5 on:** November 10, 2005, 01:48:13 PM »

Yup, did some research.. you are correct

SAN FRANCISCO--Ending speculation about whether it was shifting to a paid model, Microsoft said on Tuesday that it will provide customers with its new anti-spyware software for free.

The pledge, made by Microsoft Chairman Bill Gates during his keynote speech kicking off the RSA Conference 2005 here, comes after the company had been testing its AntiSpyware application--technology it acquired with its purchase of security software maker Giant Software.

"Just as spyware is something that we have to nip down today, we have decided that all licensed Windows users should have that protection at no charge," Gates said.

The initiative is part of Microsoft's efforts to strengthen security for home and business users of its Windows desktop software. Consumers are not always aware of the dangers of such threats as spyware, viruses and "phishing." A study published last October found that more than 80 percent of consumers had been infected by spyware.

http://news.com.com/Windows+anti-spyware+to+come+free+of+charge/2100-7355_3-5577202.html

sully! · « **Reply #6 on:** November 10, 2005, 08:59:37 PM »

FYI, it's release name will be called Windows Defender.

Vulgate · « **Reply #7 on:** November 11, 2005, 10:19:24 AM »

I put it on PCs I work on, it works well. even my girlfriends 14 year old sister can't kill here PC anymore..... (Microsoft Anti-spyware and Anti-Vir, great free combo)

.:F3ar0n:. · « **Reply #8 on:** December 06, 2005, 12:17:48 PM »

Conclussion...A worth while install (turn off that real time protection ALREADY)

Going back to this post after fathering it in the begining, MS Spyware beta held up pretty well. It don't hold up well on my processor though. Even though I have a A4000+, I was being taxed running spyware realtime protector and FEAR at the same time. With this said, I've uninstalled it for the moment, but keep the install realitively close on my HD.

F3ar0n

*Only 140 points to go till I reach the 2500 mark...Yar...

0_0

sully! · « **Reply #9 on:** December 06, 2005, 11:38:45 PM »

I've always had realtime protection enabled and have never run into any performance issues with it (Athlon64 3200). Really, why wouldn't you run realtime protection? It's like waiting for a car accident to happen before you buckle your seatbelt. Prevent the infection in the first place and then never worry about having to recover. PROACTIVE vs. REACTIVE. Learn it, live it, preach it!

.:F3ar0n:. · « **Reply #10 on:** December 07, 2005, 04:40:02 PM »

All I know is that my computer has been f*cking with me within the past 3 months. It seems to get really bogged down for no reason whatsoever. Right now I'm running Aluria which has realtime spyware and firewall prevention. I haven't had any issues with it at all.

Now what's wierd is that it alerted me that rundll32.exe tried to run an app outside my system through an ip like 60.78.0.1 or something. I've denied the access and not 1 popup has appeared yet on my system. It's like something hijacked it or something. I don't know. I really don't know what rundll32.exe does besides the fact that its really inportant. Does it manage IE? I can run ie right now and i'm not gettting popups so no complaints.

Please let me know what this means

David

sully! · « **Reply #11 on:** December 07, 2005, 06:01:52 PM »

Rundll32 allows DLL's to be executed (similar to what a an .exe would do). Why this is necessary vs. having a regular exe I don't know, but it can be quite useful.

We use this at work to map printers to a user's machine as part of their logon scripts.

Code: [Select]

@echo off
c:
rundll32 printui.dll,PrintUIEntry /in /n\\servername\PrinterName
exit

If you'd like to see what all the switches available are, type this at a command prompt:

Code: [Select]

rundll32 printui.dll,PrintUIEntry /?

Back to the original question, a DLL is attempting to be run via this method and judging by the IP you gave, it's probably a good thing you have it blocked. The IP's reverse lookup comes back as softbank060078000001.bbtec.net. I went to http://bbtec.net and it is a page in Japanese, possibly an ISP company (BB=BroadBand???). Anyways, keep it blocked, I'm sure you have no good reason to communicate with a Japanese ISP. Good catch.

Author Topic: Microsoft Spyware Beta...Is It Really This Good (Read 1950 times)

Vulgate